Software Inventory Message and Attributes for PA-TNC (SWIMA) » History » Version 9
« Previous -
Version 9/27
(diff) -
Next » -
Current version
Andreas Steffen, 13.06.2017 14:10
Software Inventory Message and Attributes for PA-TNC (SWIMA)¶
- Table of contents
- Software Inventory Message and Attributes for PA-TNC (SWIMA)
Starting PT-TLS Server Daemon¶
The PT-TLS server based on the strongSwan systemd daemon is usually started automatically at boot time with the command
systemctl start strongswan-swanctl
bbbbbbbbbFirst all the PA-TNC attribute definitions form the IETF, TCG, ITA-HSR and PWG namespaces are loaded. The IMVs to by dynamically loaded are read from /etc/tnc_config.
Jun 12 09:46:00 koala systemd[1]: Starting strongSwan IPsec IKEv1/IKEv2 daemon using swanctl... Jun 12 09:46:00 koala charon-systemd[3747]: TNC recommendation policy is 'default' Jun 12 09:46:00 koala charon-systemd[3747]: loading IMVs from '/etc/tnc_config' Jun 12 09:46:00 koala charon-systemd[3747]: added IETF attributes Jun 12 09:46:00 koala charon-systemd[3747]: added ITA-HSR attributes Jun 12 09:46:00 koala charon-systemd[3747]: added PWG attributes Jun 12 09:46:00 koala charon-systemd[3747]: added TCG attributes Jun 12 09:46:00 koala charon-systemd[3747]: libimcv initialized
The SWMA IMV is loaded as a dynamic library and attached to the TNC server.
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 "SWIMA" initialized Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 supports 1 message type: 'IETF/Software' 0x000000/0x00000009 Jun 12 09:46:00 koala charon-systemd[3747]: IMV 1 "SWIMA" loaded from '/usr/lib/ipsec/imcvs/imv-swima.so'
The OS IMV is loaded as a dynamic library and attached to the TNC server.
Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 "OS" initialized Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 supports 1 message type: 'IETF/Operating System' 0x000000/0x00000001 Jun 12 09:46:00 koala charon-systemd[3747]: IMV 2 "OS" loaded from '/usr/lib/ipsec/imcvs/imv-os.so'
The strongSwan daemon loads all required plugins and goes into multi-threading mode so that multiple PT-TLS connections can be handled
Jun 12 09:46:00 koala charon-systemd[3747]: loaded plugins: charon-systemd charon-systemd random nonce x509 tpm openssl revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pem curve25519 chapoly sha3 mgf1 ntru bliss newhope eap-dynamic eap-radius eap-identity eap-md5 eap-ttls eap-tls eap-tnc tnc-imv tnc-pdp tnc-tnccs tnccs-20 tnc-ifmap kernel-netlink socket-default sqlite curl vici farp dhcp Jun 12 09:46:00 koala charon-systemd[3747]: spawning 16 worker threads
Multiple PT-TLS server and CA certificates are loaded into the daemon
Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=mse2.strongswan.org' Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=koala.strongsec.com' Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=koala.strongsec.com' Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA' Jun 12 09:46:00 koala charon-systemd[3747]: loaded certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=MSE CA'
The actual loading is done by the swanctl command line tool which transfers the certificates to the daemon via a Unix socket.
Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/MSE2_Cert.pem' Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/koala_AIK_ECC_Cert.pem' Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509/koala_AIK_RSA_Cert.pem' Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509ca/strongsecCaCert.pem' Jun 12 09:46:01 koala swanctl[3766]: loaded certificate from '/etc/swanctl/x509ca/MSE_CA_Cert.pem'
The first server certificate has a matching ECDSA private key loaded from file
Jun 12 09:46:00 koala charon-systemd[3747]: loaded ECDSA private key
The second server certificate has a matching ECDSA key protected by a TPM 2.0
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - algorithms: RSA SHA1 HMAC AES MGF1 KEYEDHASH XOR SHA256 RSASSA RSAES RSAPSS OAEP ECDSA ECDH SM2 ECMQV KDF1_SP800_108 ECC SYMCIPHER CTR OFB CBC CFB ECB Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - ECC curves: NIST_P256 BN_P256 Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 via TSS2 available Jun 12 09:46:00 koala charon-systemd[3747]: AIK signature algorithm is ECDSA with SHA256 hash Jun 12 09:46:00 koala charon-systemd[3747]: loaded ECDSA private key from token
The third server certificate has a matching RSA key protected by a TPM 2.0
Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - algorithms: RSA SHA1 HMAC AES MGF1 KEYEDHASH XOR SHA256 RSASSA RSAES RSAPSS OAEP ECDSA ECDH SM2 ECMQV KDF1_SP800_108 ECC SYMCIPHER CTR OFB CBC CFB ECB Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 - ECC curves: NIST_P256 BN_P256 Jun 12 09:46:00 koala charon-systemd[3747]: TPM 2.0 via TSS2 available Jun 12 09:46:00 koala charon-systemd[3747]: AIK signature algorithm is RSASSA with SHA256 hash Jun 12 09:46:00 koala charon-systemd[3747]: loaded RSA private key from token
Again it is the swanctl tool which loads the private keys or determines the IDs of keys residing on smartcard or TPM devices.
Jun 12 09:46:01 koala swanctl[3766]: loaded ecdsa key from '/etc/swanctl/ecdsa/MSE2_Key.pem' Jun 12 09:46:01 koala swanctl[3766]: loaded key token_ak_ecc from token [keyid: 8e70ca6665cd2e6c7893e407cb9a7cd6264d714f] Jun 12 09:46:01 koala swanctl[3766]: loaded key token_ak_rsa from token [keyid: ce431f647d549f759267422f4097c874e2eca547]
The PT-TLS server is now up and ready to accept connections on the default TCP port 271.
Jun 12 09:46:01 koala systemd[1]: Started strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
Accepting PT-TLS Client Connection¶
A PT-TLS client connects to the PT-TLS server and does a TLS 1.2 handshake to establish a secure socket
Jun 12 10:37:03 koala charon-systemd[17732]: accepting PT-TLS stream from 77.56.145.176 Jun 12 10:37:03 koala charon-systemd[17732]: entering PT-TLS negotiation phase Jun 12 10:37:03 koala charon-systemd[17732]: negotiated TLS 1.2 using suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS server certificate 'C=CH, O=MSE, OU=TSM_ITSec, CN=mse2.strongswan.org' Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS cert request for 'C=CH, O=MSE, OU=TSM_ITSec, CN=MSE CA' Jun 12 10:37:03 koala charon-systemd[17732]: sending TLS cert request for 'C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA' Jun 12 10:37:03 koala charon-systemd[17732]: received TLS peer certificate 'C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com' Jun 12 10:37:03 koala charon-systemd[17732]: using certificate "C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com" Jun 12 10:37:03 koala charon-systemd[17732]: using trusted ca certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA" Jun 12 10:37:03 koala charon-systemd[17732]: checking certificate status of "C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com" Jun 12 10:37:03 koala charon-systemd[17732]: using trusted certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA" Jun 12 10:37:03 koala charon-systemd[17732]: crl correctly signed by "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA" Jun 12 10:37:03 koala charon-systemd[17732]: crl is valid: until Jun 18 10:00:01 2017 Jun 12 10:37:03 koala charon-systemd[17732]: using cached crl Jun 12 10:37:03 koala charon-systemd[17732]: using trusted certificate "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA" Jun 12 10:37:03 koala charon-systemd[17732]: crl correctly signed by "C=CH, O=strongSec GmbH, CN=strongSec 2016 Root CA" Jun 12 10:37:03 koala charon-systemd[17732]: crl is valid: until Jun 13 10:00:01 2017 Jun 12 10:37:03 koala charon-systemd[17732]: using cached crl Jun 12 10:37:03 koala charon-systemd[17732]: certificate status is good Jun 12 10:37:03 koala charon-systemd[17732]: reached self-signed root ca with a path length of 0
The PT-TLS protocol is started skipping SASL-based client authentication because the client already authenticated itself during the TLS handshake.
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #0 of type 'Version Request' (20 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #0 of type 'Version Response' (20 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: negotiated PT-TLS version 1 Jun 12 10:37:03 koala charon-systemd[17732]: doing SASL client authentication Jun 12 10:37:03 koala charon-systemd[17732]: skipping SASL, client already authenticated by TLS certificate Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #1 of type 'SASL Mechanisms' (16 bytes)
The PT-TLS protocol switches to the data transport phase and a TNCCS (PB-TNC) connection is instantiated
Jun 12 10:37:03 koala charon-systemd[17732]: entering PT-TLS data transport phase Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #1 of type 'PB-TNC Batch' (337 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: assigned TNCCS Connection ID 2
A SWIMA IMV instance is created for this PB-TNC connection
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh Jun 12 10:37:03 koala charon-systemd[17732]: over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes Jun 12 10:37:03 koala charon-systemd[17732]: user AR identity 'C=CH, O=strongSec GmbH, CN=brisbane.strongsec.com' of type X.500 DN authenticated by certificate Jun 12 10:37:03 koala charon-systemd[17732]: machine AR identity '77.56.145.176' of type IPv4 address authenticated by unknown method
An OS IMV instance is created for this PB-TNC connection
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" created a state for IF-TNCCS 2.0 Connection ID 2: +long +excl -soh Jun 12 10:37:03 koala charon-systemd[17732]: over IF-T for TLS 2.0 with maximum PA-TNC message size of 131024 bytes Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" changed state of Connection ID 2 to 'Handshake' Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" changed state of Connection ID 2 to 'Handshake'
The first PB-TNC client batch is received
Jun 12 10:37:03 koala charon-systemd[17732]: received TNCCS batch (321 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling inbound connection Jun 12 10:37:03 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2 Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Init' to 'Server Working' Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-Language-Preference message (31 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-PA message (230 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: processing IETF/PB-PA message (52 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: setting language preference to 'en'
The OS IMC sends some standard information about the client platform
Jun 12 10:37:03 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Operating System' 0x000000/0x00000001
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 "OS" received message for Connection ID 2 from IMC 1
Jun 12 10:37:03 koala charon-systemd[17732]: => 206 bytes @ 0x7f4dc8002e40
0: 01 00 00 00 0D 24 79 C7 00 00 00 00 00 00 00 02 .....$y.........
16: 00 00 00 17 00 71 32 00 00 55 62 75 6E 74 75 00 .....q2..Ubuntu.
32: 00 00 00 00 00 00 04 00 00 00 1B 0C 31 36 2E 30 ............16.0
48: 34 20 78 38 36 5F 36 34 00 00 00 00 00 00 00 00 4 x86_64........
64: 00 03 00 00 00 1C 00 00 00 10 00 00 00 04 00 00 ................
80: 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 ................
96: 00 24 03 01 00 00 32 30 31 37 2D 30 36 2D 31 31 .$....2017-06-11
112: 54 30 39 3A 30 37 3A 33 34 5A 00 00 00 00 00 00 T09:07:34Z......
128: 00 0B 00 00 00 10 00 00 00 01 00 00 00 00 00 00 ................
144: 00 0C 00 00 00 10 00 00 00 00 00 00 90 2A 00 00 .............*..
160: 00 08 00 00 00 34 35 64 39 35 30 32 31 33 39 36 .....45d95021396
176: 64 32 34 31 35 65 35 63 35 33 63 61 32 64 65 61 d2415e5c53ca2dea
192: 36 66 62 63 31 63 32 33 38 37 63 35 36 61 6fbc1c2387c56a
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC message with ID 0x0d2479c7
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Product Information' 0x000000/0x00000002
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/String Version' 0x000000/0x00000004
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Numeric Version' 0x000000/0x00000003
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Operational Status' 0x000000/0x00000005
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Forwarding Enabled' 0x000000/0x0000000b
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/Factory Default Password Enabled' 0x000000/0x0000000c
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'ITA-HSR/Device ID' 0x00902a/0x00000008
This is the plaintext information contained in the PA-TNC attributes
Jun 12 10:37:03 koala charon-systemd[17732]: operating system name is 'Ubuntu' from vendor Canonical Jun 12 10:37:03 koala charon-systemd[17732]: operating system version is '16.04 x86_64' Jun 12 10:37:03 koala charon-systemd[17732]: operating system numeric version is 16.4 Jun 12 10:37:03 koala charon-systemd[17732]: operational status: operational, result: successful Jun 12 10:37:03 koala charon-systemd[17732]: last boot: Jun 11 09:07:34 UTC 2017 Jun 12 10:37:03 koala charon-systemd[17732]: IPv4 forwarding is enabled Jun 12 10:37:03 koala charon-systemd[17732]: factory default password is disabled Jun 12 10:37:03 koala charon-systemd[17732]: device ID is 5d95021396d2415e5c53ca2dea6fbc1c2387c56a
The second PA-TNC message
Jun 12 10:37:03 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2
Jun 12 10:37:03 koala charon-systemd[17732]: => 28 bytes @ 0x7f4dc8003780
0: 01 00 00 00 0E 4F AE 95 00 00 55 97 00 00 00 21 .....O....U....!
16: 00 00 00 14 00 98 96 80 00 01 FF B8 ............
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC message with ID 0x0e4fae95
Jun 12 10:37:03 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 received a segmentation contract request from IMC 2 for PA message type 'IETF/Software' 0x000000/0x00000009
maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0xdb795d86
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 28 bytes @ 0x7f4dc8002d30
0: 01 00 00 00 DB 79 5D 86 00 00 55 97 00 00 00 22 .....y]...U...."
16: 00 00 00 14 00 98 96 80 00 01 FF B8 ............
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 requests a segmentation contract for PA message type 'IETF/Operating System' 0x000000/0x00000001
maximum attribute size of 100000000 bytes with maximum segment size of 131000 bytes
Jun 12 10:37:03 koala charon-systemd[17732]: assigned session ID 40 to Connection ID 2 Jun 12 10:37:03 koala charon-systemd[17732]: running policy script: 2>&1 ipsec imv_policy_manager start 40 Jun 12 10:37:03 koala charon-systemd[17732]: policy: imv_policy_manager start successful Jun 12 10:37:03 koala charon-systemd[17732]: SWIDT workitem 251
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 has no workitems - no evaluation requested
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0x1b56eee5
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Remediation Instructions' 0x000000/0x0000000a
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 117 bytes @ 0x7f4dc80026b0
0: 01 00 00 00 1B 56 EE E5 00 00 00 00 00 00 00 09 .....V..........
16: 00 00 00 10 00 00 00 04 00 00 00 00 00 00 00 0A ................
32: 00 00 00 5D 00 00 00 00 00 00 00 02 00 00 00 42 ...]...........B
48: 49 50 20 50 61 63 6B 65 74 20 46 6F 72 77 61 72 IP Packet Forwar
64: 64 69 6E 67 0A 20 20 50 6C 65 61 73 65 20 64 69 ding. Please di
80: 73 61 62 6C 65 20 74 68 65 20 66 6F 72 77 61 72 sable the forwar
96: 64 69 6E 67 20 6F 66 20 49 50 20 70 61 63 6B 65 ding of IP packe
112: 74 73 02 65 6E ts.en
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Operating System' 0x000000/0x00000001
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 2 provides recommendation 'allow' and evaluation 'don't know'
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling outbound connection Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working' Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-TNC SDATA batch Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message Jun 12 10:37:03 koala charon-systemd[17732]: sending PB-TNC SDATA batch (201 bytes) for Connection ID 2 Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #2 of type 'PB-TNC Batch' (217 bytes)
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #2 of type 'PB-TNC Batch' (24 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: received TNCCS batch (8 bytes) Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling inbound connection Jun 12 10:37:03 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2 Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working' Jun 12 10:37:03 koala charon-systemd[17732]: received empty PB-TNC CDATA batch
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 requests a segmentation contract for PA message type 'IETF/Software' 0x000000/0x00000009
maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
Sending IETF SW Request Attribute¶
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 handles SWIDT workitem 251
Jun 12 10:37:03 koala charon-systemd[17732]: IMV 1 issues sw request 251
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC message with ID 0x8311ab95
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Max Attribute Size Request' 0x005597/0x00000021
Jun 12 10:37:03 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/SW Request' 0x000000/0x00000011
Jun 12 10:37:03 koala charon-systemd[17732]: created PA-TNC message: => 52 bytes @ 0x7f4db0006200
0: 01 00 00 00 83 11 AB 95 00 00 55 97 00 00 00 21 ..........U....!
16: 00 00 00 14 00 98 96 80 00 01 FF B8 00 00 00 00 ................
32: 00 00 00 11 00 00 00 18 20 00 00 00 00 00 00 FB ........ .......
48: 00 00 00 00 ....
Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:03 koala charon-systemd[17732]: TNC server is handling outbound connection Jun 12 10:37:03 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working' Jun 12 10:37:03 koala charon-systemd[17732]: creating PB-TNC SDATA batch Jun 12 10:37:03 koala charon-systemd[17732]: adding IETF/PB-PA message Jun 12 10:37:03 koala charon-systemd[17732]: sending PB-TNC SDATA batch (84 bytes) for Connection ID 2 Jun 12 10:37:03 koala charon-systemd[17732]: sending PT-TLS message #3 of type 'PB-TNC Batch' (100 bytes)
Receiving IETF SW Identity Inventory Attribute¶
Jun 12 10:37:03 koala charon-systemd[17732]: received PT-TLS message #3 of type 'PB-TNC Batch' (131072 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (131056 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (131048 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
Jun 12 10:37:04 koala charon-systemd[17732]: => 131024 bytes @ 0x7f4dd808cb50
0: 01 00 00 00 76 04 15 EC 00 00 55 97 00 00 00 22 ....v.....U...."
16: 00 00 00 14 00 98 96 80 00 01 FF B8 00 00 55 97 ..............U.
32: 00 00 00 23 00 01 FF B4 C0 00 00 01 00 00 00 00 ...#............
48: 00 00 00 12 00 02 7F B7 00 00 07 FF 00 00 00 FB ................
64: 11 22 33 44 00 00 00 01 00 00 00 00 00 00 00 01 ."3D............
80: 01 00 00 51 73 74 72 6F 6E 67 73 77 61 6E 2E 6F ...Qstrongswan.o
96: 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D rg_Ubuntu_16.04-
112: 78 38 36 5F 36 34 2D 61 31 31 79 2D 70 72 6F 66 x86_64-a11y-prof
128: 69 6C 65 2D 6D 61 6E 61 67 65 72 2D 69 6E 64 69 ile-manager-indi
144: 63 61 74 6F 72 2D 30 2E 31 2E 31 30 2D 30 75 62 cator-0.1.10-0ub
160: 75 6E 74 75 33 00 00 00 00 00 00 00 00 00 01 01 untu3...........
176: 00 00 57 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 ..Wstrongswan.or
192: 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 g_Ubuntu_16.04-x
208: 38 36 5F 36 34 2D 61 63 63 6F 75 6E 74 2D 70 6C 86_64-account-pl
224: 75 67 69 6E 2D 66 61 63 65 62 6F 6F 6B 2D 30 2E ugin-facebook-0.
240: 31 32 7E 31 36 2E 30 34 2E 32 30 31 36 30 31 32 12~16.04.2016012
256: 36 2D 30 75 62 75 6E 74 75 31 00 00 00 00 00 00 6-0ubuntu1......
272: 00 00 00 01 01 00 00 55 73 74 72 6F 6E 67 73 77 .......Ustrongsw
288: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 an.org_Ubuntu_16
304: 2E 30 34 2D 78 38 36 5F 36 34 2D 61 63 63 6F 75 .04-x86_64-accou
320: 6E 74 2D 70 6C 75 67 69 6E 2D 66 6C 69 63 6B 72 nt-plugin-flickr
336: 2D 30 2E 31 32 7E 31 36 2E 30 34 2E 32 30 31 36 -0.12~16.04.2016
352: 30 31 32 36 2D 30 75 62 75 6E 74 75 31 00 00 00 0126-0ubuntu1...
368: 00 00 00 00 00 00 01 01 00 00 55 73 74 72 6F 6E ..........Ustron
384: 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 gswan.org_Ubuntu
400: 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D 61 63 _16.04-x86_64-ac
416: 63 6F 75 6E 74 2D 70 6C 75 67 69 6E 2D 67 6F 6F count-plugin-goo
432: 67 6C 65 2D 30 2E 31 32 7E 31 36 2E 30 34 2E 32 gle-0.12~16.04.2
448: 30 31 36 30 31 32 36 2D 30 75 62 75 6E 74 75 31 0160126-0ubuntu1
...
130656: 00 00 00 01 01 00 00 40 73 74 72 6F 6E 67 73 77 .......@strongsw
130672: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 an.org_Ubuntu_16
130688: 2E 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F .04-x86_64-pytho
130704: 6E 2D 70 6B 67 2D 72 65 73 6F 75 72 63 65 73 2D n-pkg-resources-
130720: 32 30 2E 37 2E 30 2D 31 00 00 00 00 00 00 00 00 20.7.0-1........
130736: 00 01 01 00 00 3D 73 74 72 6F 6E 67 73 77 61 6E .....=strongswan
130752: 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 .org_Ubuntu_16.0
130768: 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 2D 4-x86_64-python-
130784: 73 65 74 75 70 74 6F 6F 6C 73 2D 32 30 2E 37 2E setuptools-20.7.
130800: 30 2D 31 00 00 00 00 00 00 00 00 00 01 01 00 00 0-1.............
130816: 38 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 8strongswan.org_
130832: 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 38 36 Ubuntu_16.04-x86
130848: 5F 36 34 2D 70 79 74 68 6F 6E 2D 74 61 6C 6C 6F _64-python-tallo
130864: 63 2D 32 2E 31 2E 35 2D 32 00 00 00 00 00 00 00 c-2.1.5-2.......
130880: 00 00 01 01 00 00 38 73 74 72 6F 6E 67 73 77 61 ......8strongswa
130896: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E n.org_Ubuntu_16.
130912: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 04-x86_64-python
130928: 2D 77 68 65 65 6C 2D 30 2E 32 39 2E 30 2D 31 00 -wheel-0.29.0-1.
130944: 00 00 00 00 00 00 00 00 01 01 00 00 44 73 74 72 ............Dstr
130960: 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E ongswan.org_Ubun
130976: 74 75 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D tu_16.04-x86_64-
130992: 70 79 74 68 6F 6E 32 2E 37 2D 32 2E 37 2E 31 32 python2.7-2.7.12
131008: 2D 31 75 62 75 6E 74 75 30 7E 31 36 2E 30 34 2E -1ubuntu0~16.04.
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0x760415ec
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Max Attribute Size Response' 0x005597/0x00000022
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Attribute Segment Envelope' 0x005597/0x00000023
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 received a segmentation contract response from IMC 2 for PA message type 'IETF/Software' 0x000000/0x00000009
maximum attribute size of 10000000 bytes with maximum segment size of 131000 bytes
Jun 12 10:37:04 koala charon-systemd[17732]: received first segment for base attribute ID 1 (130980 bytes) Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/SW Identifier Inventory' 0x000000/0x00000012 Jun 12 10:37:04 koala charon-systemd[17732]: 67 bytes insufficient to parse 68 bytes of data
Jun 12 10:37:04 koala charon-systemd[17732]: received software identity inventory with 1646 items for request 251 at eid 1 of epoch 0x11223344, 401 items to follow
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-a11y-profile-manager-indicator-0.1.10-0ubuntu3
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-account-plugin-facebook-0.12~16.04.20160126-0ubuntu1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-account-plugin-flickr-0.12~16.04.20160126-0ubuntu1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-account-plugin-google-0.12~16.04.20160126-0ubuntu1
...
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python-pkg-resources-20.7.0-1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python-setuptools-20.7.0-1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python-talloc-2.1.5-2
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python-wheel-0.29.0-1
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC message with ID 0x63400a67
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC attribute type 'TCG/Next Segment Request' 0x005597/0x00000024
Jun 12 10:37:04 koala charon-systemd[17732]: created PA-TNC message: => 24 bytes @ 0x7f4dd8157610
0: 01 00 00 00 63 40 0A 67 00 00 55 97 00 00 00 24 ....c@.g..U....$
16: 00 00 00 10 00 00 00 01 ........
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling outbound connection
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-TNC SDATA batch
Jun 12 10:37:04 koala charon-systemd[17732]: adding IETF/PB-PA message
Jun 12 10:37:04 koala charon-systemd[17732]: sending PB-TNC SDATA batch (56 bytes) for Connection ID 2
Jun 12 10:37:04 koala charon-systemd[17732]: sending PT-TLS message #4 of type 'PB-TNC Batch' (72 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: received PT-TLS message #4 of type 'PB-TNC Batch' (32859 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (32843 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (32835 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
Jun 12 10:37:04 koala charon-systemd[17732]: => 32811 bytes @ 0x7f4dd00250b0
0: 01 00 00 00 63 31 E2 36 00 00 55 97 00 00 00 23 ....c1.6..U....#
16: 00 00 80 23 00 00 00 01 31 00 00 00 00 00 00 00 ...#....1.......
32: 00 00 01 01 00 00 48 73 74 72 6F 6E 67 73 77 61 ......Hstrongswa
48: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E n.org_Ubuntu_16.
64: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 04-x86_64-python
80: 32 2E 37 2D 64 65 76 2D 32 2E 37 2E 31 32 2D 31 2.7-dev-2.7.12-1
96: 75 62 75 6E 74 75 30 7E 31 36 2E 30 34 2E 31 00 ubuntu0~16.04.1.
112: 00 00 00 00 00 00 00 00 01 01 00 00 4C 73 74 72 ............Lstr
128: 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 55 62 75 6E ongswan.org_Ubun
144: 74 75 5F 31 36 2E 30 34 2D 78 38 36 5F 36 34 2D tu_16.04-x86_64-
160: 70 79 74 68 6F 6E 32 2E 37 2D 6D 69 6E 69 6D 61 python2.7-minima
176: 6C 2D 32 2E 37 2E 31 32 2D 31 75 62 75 6E 74 75 l-2.7.12-1ubuntu
192: 30 7E 31 36 2E 30 34 2E 31 00 00 00 00 00 00 00 0~16.04.1.......
208: 00 00 01 01 00 00 32 73 74 72 6F 6E 67 73 77 61 ......2strongswa
224: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E n.org_Ubuntu_16.
240: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 04-x86_64-python
256: 33 2D 33 2E 35 2E 31 2D 33 00 00 00 00 00 00 00 3-3.5.1-3.......
272: 00 00 01 01 00 00 43 73 74 72 6F 6E 67 73 77 61 ......Cstrongswa
288: 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 2E n.org_Ubuntu_16.
304: 30 34 2D 78 38 36 5F 36 34 2D 70 79 74 68 6F 6E 04-x86_64-python
320: 33 2D 61 70 70 6F 72 74 2D 32 2E 32 30 2E 31 2D 3-apport-2.20.1-
336: 30 75 62 75 6E 74 75 32 2E 36 00 00 00 00 00 00 0ubuntu2.6......
...
32448: 00 00 00 01 01 00 00 42 73 74 72 6F 6E 67 73 77 .......Bstrongsw
32464: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 an.org_Ubuntu_16
32480: 2E 30 34 2D 78 38 36 5F 36 34 2D 7A 65 6E 69 74 .04-x86_64-zenit
32496: 79 2D 63 6F 6D 6D 6F 6E 2D 33 2E 31 38 2E 31 2E y-common-3.18.1.
32512: 31 2D 31 75 62 75 6E 74 75 32 00 00 00 00 00 00 1-1ubuntu2......
32528: 00 00 00 01 01 00 00 2D 73 74 72 6F 6E 67 73 77 .......-strongsw
32544: 61 6E 2E 6F 72 67 5F 55 62 75 6E 74 75 5F 31 36 an.org_Ubuntu_16
32560: 2E 30 34 2D 78 38 36 5F 36 34 2D 7A 69 70 2D 33 .04-x86_64-zip-3
32576: 2E 30 2D 31 31 00 00 00 00 00 00 00 00 00 01 01 .0-11...........
32592: 00 00 41 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 ..Astrongswan.or
32608: 67 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 g_Ubuntu_16.04-x
32624: 38 36 5F 36 34 2D 7A 6C 69 62 31 67 2D 31 7E 31 86_64-zlib1g-1~1
32640: 2E 32 2E 38 2E 64 66 73 67 2D 32 75 62 75 6E 74 .2.8.dfsg-2ubunt
32656: 75 34 2E 31 00 00 00 00 00 00 00 00 00 01 01 00 u4.1............
32672: 00 45 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 .Estrongswan.org
32688: 5F 55 62 75 6E 74 75 5F 31 36 2E 30 34 2D 78 38 _Ubuntu_16.04-x8
32704: 36 5F 36 34 2D 7A 6C 69 62 31 67 2D 64 65 76 2D 6_64-zlib1g-dev-
32720: 31 7E 31 2E 32 2E 38 2E 64 66 73 67 2D 32 75 62 1~1.2.8.dfsg-2ub
32736: 75 6E 74 75 34 2E 31 00 00 00 00 00 00 00 00 00 untu4.1.........
32752: 01 02 00 00 1F 73 74 72 6F 6E 67 73 77 61 6E 2E .....strongswan.
32768: 6F 72 67 5F 73 74 72 6F 6E 67 53 77 61 6E 2D 35 org_strongSwan-5
32784: 2D 35 2D 33 00 15 2F 75 73 72 2F 73 68 61 72 65 -5-3../usr/share
32800: 2F 73 74 72 6F 6E 67 73 77 61 6E /strongswan
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0x6331e236
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'TCG/Attribute Segment Envelope' 0x005597/0x00000023
Jun 12 10:37:04 koala charon-systemd[17732]: received last segment for base attribute ID 1 (32787 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: received software identity inventory with 401 items for request 251 at eid 1 of epoch 0x11223344, 0 items to follow
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python2.7-2.7.12-1ubuntu0~16.04.1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python2.7-dev-2.7.12-1ubuntu0~16.04.1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python2.7-minimal-2.7.12-1ubuntu0~16.04.1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python3-3.5.1-3
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-python3-apport-2.20.1-0ubuntu2.6
...
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-zenity-common-3.18.1.1-1ubuntu2
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-zip-3.0-11
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-zlib1g-1~1.2.8.dfsg-2ubuntu4.1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_Ubuntu_16.04-x86_64-zlib1g-dev-1~1.2.8.dfsg-2ubuntu4.1
Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_strongSwan-5-5-3
Jun 12 10:37:04 koala charon-systemd[17732]: 1 SWID tag target Jun 12 10:37:04 koala charon-systemd[17732]: strongswan.org_strongSwan-5-5-3
Sending IETF [Targeted] SW Request Attribute¶
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC message with ID 0xf3c2af1e
Jun 12 10:37:04 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/SW Request' 0x000000/0x00000011
Jun 12 10:37:04 koala charon-systemd[17732]: created PA-TNC message: => 65 bytes @ 0x7f4dd0003c40
0: 01 00 00 00 F3 C2 AF 1E 00 00 00 00 00 00 00 11 ................
16: 00 00 00 39 00 00 00 01 00 00 00 FB 00 00 00 00 ...9............
32: 00 1F 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 ..strongswan.org
48: 5F 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D _strongSwan-5-5-
64: 33 3
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling outbound connection
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Client Working'
Jun 12 10:37:04 koala charon-systemd[17732]: creating PB-TNC SDATA batch
Jun 12 10:37:04 koala charon-systemd[17732]: adding IETF/PB-PA message
Jun 12 10:37:04 koala charon-systemd[17732]: sending PB-TNC SDATA batch (97 bytes) for Connection ID 2
Jun 12 10:37:04 koala charon-systemd[17732]: sending PT-TLS message #5 of type 'PB-TNC Batch' (113 bytes)
Receiving IETF SW Inventory Attribute¶
Jun 12 10:37:04 koala charon-systemd[17732]: received PT-TLS message #5 of type 'PB-TNC Batch' (507 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: received TNCCS batch (491 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: TNC server is handling inbound connection
Jun 12 10:37:04 koala charon-systemd[17732]: processing PB-TNC CDATA batch for Connection ID 2
Jun 12 10:37:04 koala charon-systemd[17732]: PB-TNC state transition from 'Client Working' to 'Server Working'
Jun 12 10:37:04 koala charon-systemd[17732]: processing IETF/PB-PA message (483 bytes)
Jun 12 10:37:04 koala charon-systemd[17732]: handling PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:04 koala charon-systemd[17732]: IMV 1 "SWIMA" received message for Connection ID 2 from IMC 2 to IMV 1
Jun 12 10:37:04 koala charon-systemd[17732]: => 459 bytes @ 0x7f4dd4005a80
0: 01 00 00 00 EF 28 38 E0 00 00 00 00 00 00 00 14 .....(8.........
16: 00 00 01 C3 00 00 00 01 00 00 00 FB 11 22 33 44 ............."3D
32: 00 00 00 01 00 00 00 00 00 00 00 01 02 00 00 1F ................
48: 73 74 72 6F 6E 67 73 77 61 6E 2E 6F 72 67 5F 73 strongswan.org_s
64: 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D 33 00 trongSwan-5-5-3.
80: 15 2F 75 73 72 2F 73 68 61 72 65 2F 73 74 72 6F ./usr/share/stro
96: 6E 67 73 77 61 6E 00 00 01 61 3C 3F 78 6D 6C 20 ngswan...a<?xml
112: 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 20 65 6E version="1.0" en
128: 63 6F 64 69 6E 67 3D 22 75 74 66 2D 38 22 3F 3E coding="utf-8"?>
144: 0A 0A 3C 53 6F 66 74 77 61 72 65 49 64 65 6E 74 ..<SoftwareIdent
160: 69 74 79 0A 20 20 6E 61 6D 65 3D 22 73 74 72 6F ity. name="stro
176: 6E 67 53 77 61 6E 22 0A 20 20 74 61 67 49 64 3D ngSwan". tagId=
192: 22 73 74 72 6F 6E 67 53 77 61 6E 2D 35 2D 35 2D "strongSwan-5-5-
208: 33 22 0A 20 20 76 65 72 73 69 6F 6E 3D 22 35 2E 3". version="5.
224: 35 2E 33 22 20 76 65 72 73 69 6F 6E 53 63 68 65 5.3" versionSche
240: 6D 65 3D 22 61 6C 70 68 61 6E 75 6D 65 72 69 63 me="alphanumeric
256: 22 0A 20 20 78 6D 6C 6E 73 3D 22 68 74 74 70 3A ". xmlns="http:
272: 2F 2F 73 74 61 6E 64 61 72 64 73 2E 69 73 6F 2E //standards.iso.
288: 6F 72 67 2F 69 73 6F 2F 31 39 37 37 30 2F 2D 32 org/iso/19770/-2
304: 2F 32 30 31 35 2F 73 63 68 65 6D 61 2E 78 73 64 /2015/schema.xsd
320: 22 3E 0A 20 20 3C 45 6E 74 69 74 79 0A 20 20 20 ">. <Entity.
336: 20 6E 61 6D 65 3D 22 73 74 72 6F 6E 67 53 77 61 name="strongSwa
352: 6E 20 50 72 6F 6A 65 63 74 22 0A 20 20 20 20 72 n Project". r
368: 65 67 69 64 3D 22 73 74 72 6F 6E 67 73 77 61 6E egid="strongswan
384: 2E 6F 72 67 22 0A 20 20 20 20 72 6F 6C 65 3D 22 .org". role="
400: 73 6F 66 74 77 61 72 65 43 72 65 61 74 6F 72 20 softwareCreator
416: 6C 69 63 65 6E 73 6F 72 20 74 61 67 43 72 65 61 licensor tagCrea
432: 74 6F 72 22 2F 3E 0A 3C 2F 53 6F 66 74 77 61 72 tor"/>.</Softwar
448: 65 49 64 65 6E 74 69 74 79 3E 0A eIdentity>.
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC message with ID 0xef2838e0
Jun 12 10:37:04 koala charon-systemd[17732]: processing PA-TNC attribute type 'IETF/SW Inventory' 0x000000/0x00000014
Jun 12 10:37:04 koala charon-systemd[17732]: received software inventory with 1 item for request 251 at eid 1 of epoch 0x11223344, 0 items to follow
XML-encoded ISO-17770-2:2015 SWID tag for the strongSwan 5.3.3 software
Jun 12 10:37:04 koala charon-systemd[17732]: <?xml version="1.0" encoding="utf-8"?>
<SoftwareIdentity
name="strongSwan"
tagId="strongSwan-5-5-3"
version="5.5.3" versionScheme="alphanumeric"
xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd">
<Entity
name="strongSwan Project"
regid="strongswan.org"
role="softwareCreator licensor tagCreator"/>
</SoftwareIdentity>
Terminating PT-TLS Client Connection¶
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 handled SWIDT workitem 251: allow - received inventory of 2047 SWID tag IDs and 1 SWID tag
Jun 12 10:37:05 koala charon-systemd[17732]: creating PA-TNC message with ID 0x19d0d973
Jun 12 10:37:05 koala charon-systemd[17732]: creating PA-TNC attribute type 'IETF/Assessment Result' 0x000000/0x00000009
Jun 12 10:37:05 koala charon-systemd[17732]: created PA-TNC message: => 24 bytes @ 0x7f4dd4019d70
0: 01 00 00 00 19 D0 D9 73 00 00 00 00 00 00 00 09 .......s........
16: 00 00 00 10 00 00 00 00 ........
Jun 12 10:37:05 koala charon-systemd[17732]: creating PB-PA message type 'IETF/Software' 0x000000/0x00000009
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 provides recommendation 'allow' and evaluation 'compliant'
Jun 12 10:37:05 koala charon-systemd[17732]: TNC server is handling outbound connection
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 "SWIMA" changed state of Connection ID 2 to 'Allowed'
Jun 12 10:37:05 koala charon-systemd[17732]: running policy script: 2>&1 ipsec imv_policy_manager stop 40
Jun 12 10:37:05 koala charon-systemd[17732]: policy: recommendation for access requestor 77.56.145.176 is allow
Jun 12 10:37:05 koala charon-systemd[17732]: policy: imv_policy_manager stop successful
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 2 "OS" changed state of Connection ID 2 to 'Allowed'
Jun 12 10:37:05 koala charon-systemd[17732]: PB-TNC state transition from 'Server Working' to 'Decided'
Jun 12 10:37:05 koala charon-systemd[17732]: creating PB-TNC RESULT batch
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-PA message
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-Assessment-Result message
Jun 12 10:37:05 koala charon-systemd[17732]: adding IETF/PB-Access-Recommendation message
Jun 12 10:37:05 koala charon-systemd[17732]: sending PB-TNC RESULT batch (88 bytes) for Connection ID 2
Jun 12 10:37:05 koala charon-systemd[17732]: sending PT-TLS message #6 of type 'PB-TNC Batch' (104 bytes)
Jun 12 10:37:05 koala charon-systemd[17732]: received PT-TLS message #6 of type 'PB-TNC Batch' (24 bytes)
Jun 12 10:37:05 koala charon-systemd[17732]: received TNCCS batch (8 bytes)
Jun 12 10:37:05 koala charon-systemd[17732]: TNC server is handling inbound connection
Jun 12 10:37:05 koala charon-systemd[17732]: processing PB-TNC CLOSE batch for Connection ID 2
Jun 12 10:37:05 koala charon-systemd[17732]: PB-TNC state transition from 'Decided' to 'End'
Jun 12 10:37:05 koala charon-systemd[17732]: final recommendation is 'allow' and evaluation is 'compliant'
Jun 12 10:37:05 koala charon-systemd[17732]: PT-TLS connection terminates
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 1 "SWIMA" deleted the state of Connection ID 2
Jun 12 10:37:05 koala charon-systemd[17732]: IMV 2 "OS" deleted the state of Connection ID 2
Jun 12 10:37:05 koala charon-systemd[17732]: removed TNCCS Connection ID 2
Jun 12 10:37:05 koala charon-systemd[17732]: sending TLS close notify
Stopping PT-TLS Daemon¶
The strongSwan PT-TLS server daemon can be stopped using the following systemd command
systemctl stop strongswan-swanctl
Jun 12 13:14:31 koala systemd[1]: Stopping strongSwan IPsec IKEv1/IKEv2 daemon using swanctl... Jun 12 13:14:31 koala charon-systemd[17732]: SIGTERM received, shutting down Jun 12 13:14:31 koala charon-systemd[17732]: IMV 2 "OS" terminated Jun 12 13:14:31 koala charon-systemd[17732]: IMV 1 "SWIMA" terminated Jun 12 13:14:31 koala charon-systemd[17732]: removed IETF attributes Jun 12 13:14:31 koala charon-systemd[17732]: removed ITA-HSR attributes Jun 12 13:14:31 koala charon-systemd[17732]: removed PWG attributes Jun 12 13:14:31 koala charon-systemd[17732]: removed TCG attributes Jun 12 13:14:31 koala charon-systemd[17732]: libimcv terminated Jun 12 13:14:31 koala systemd[1]: Stopped strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.